Privacy Policy
14 November 2026
This policy explains what personal data ToucanLeads processes, why, and what rights you have.
1. Who we are
ToucanLeads (toucanleads.com) is operated by Nebula Labs. Contact: support@toucanleads.com.
2. Data about our customers
Account data: email address, hashed password, language, credit balance, download history.
Payment data is handled by Lemon Squeezy; we receive order details but never your card number.
We use this data to run your account, deliver downloads, send transactional emails (welcome, password reset, receipts) and prevent abuse. Legal basis: performance of a contract and legitimate interest.
3. Data in our business lists
Our lists contain business contact details that businesses publish themselves: Overture Maps open data and each business's own public website (we respect robots.txt).
Where a listing relates to an identifiable person (for example a sole trader), we process it on the basis of legitimate interest in providing B2B contact information. Pages on our site never display full email addresses or phone numbers.
Business owners can remove their listing at any time at toucanleads.com/remove; removed records are blocked from future updates.
We do not collect or sell data about businesses located in the European Union or the European Economic Area.
4. Cookies
We use only essential cookies: a session cookie to keep you logged in and a cookie that remembers your language. No advertising cookies.
5. Service providers
Railway (hosting and database), Cloudflare (domain and DNS), Lemon Squeezy (payments), Resend (transactional email). They process data only to provide their service to us.
6. Retention
Account data is kept while your account is active and deleted within 30 days after you ask us to close it, except where the law requires us to keep records (for example invoices).
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, or object to processing. Write to support@toucanleads.com. You can also complain to your local data-protection authority.
8. Changes
We will post any update to this policy on this page with a new date.